Implement set trap for proxies, and revamp class hierarchy in preparation

src/arm/builtins-arm.cc

Index: src/arm/builtins-arm.cc
diff --git a/src/arm/builtins-arm.cc b/src/arm/builtins-arm.cc
index 1b2b919305526b745bb7d47154b775effb993885..5e06f81c38f36874aa680bf28c54ef9859984346 100644
--- a/src/arm/builtins-arm.cc
+++ b/src/arm/builtins-arm.cc
@@ -948,8 +948,8 @@ static void Generate_JSConstructStubHelper(MacroAssembler* masm,
   __ b(eq, &use_receiver);
 
   // If the type of the result (stored in its map) is less than
-  // FIRST_JS_OBJECT_TYPE, it is not an object in the ECMA sense.
-  __ CompareObjectType(r0, r3, r3, FIRST_JS_OBJECT_TYPE);
+  // FIRST_OBJECT_OR_FUNCTION_CLASS_TYPE, it is not an object in the ECMA sense.

[Kevin Millikin (Chromium), 2011/05/26 09:31:08]

Maybe the terminology is still not quite right.  This catches lots of Objects
that don't have [[Class]] "Object" or "Function" (e.g., "Arguments", "Array",
"Number", etc.).

All of those things do have type Object.

[rossberg, 2011/05/31 14:50:24]

Changed according to your suggestion on the list.

+  __ CompareObjectType(r0, r3, r3, FIRST_OBJECT_OR_FUNCTION_CLASS_TYPE);
   __ b(ge, &exit);
 
   // Throw away the result of the constructor invocation and use the